Valid

GB/T 40650-2021Information security technology—Trusted computing specification—Trusted platform control module (English PDF)

信息安全技术 可信计算规范 可信平台控制模块

Preview PDF

This is a limited preview

Buy now to download the full PDF (15 pages)

Need quotation for your management?

Get a formal quotation for GB/T 40650-2021 in 30 minutes.

Issued by

SAMR; SAC

Level / Type

National · Recommended

Issue date

October 11, 2021

Implementation date

May 1, 2022

Scope

GB/T 40650-2021 is the English-translated version of 信息安全技术 可信计算规范 可信平台控制模块.

GB/T 40650-2021 describes the trusted platform control module, the protection component of a trusted computing node, and sets out what it must do.

It covers the position and role of the module in the node and its interaction with peripherals, its functional composition in a hardware layer, a basic software layer, a functional component layer and an interconnection interface, and its interfaces to the computing component, the trusted software base, management and the trusted cryptographic module.

It also sets security requirements for identification, resource access control, audit, storage space, data protection and physical protection, self-check and status maintenance, and gives the methods for confirming each requirement.

It applies to the design, production, operation, maintenance and evaluation of the module. It was issued on 11 October 2021 and has applied since 1 May 2022.

Found what you need?

Document preview — GB/T 40650-2021

National Standard of the People's Republic of China

ICS
35.030
Classification
L 80

Issued by: State Administration for Market Regulation; Standardization Administration of the PRC

Contents

  • Foreword
  • 1 Scope
  • 2 Normative references
  • 3 Terms and definitions
  • 4 Abbreviations
  • 5 Overview
  • 5.1 Trusted platform control module positioning
  • 5.2 Interaction between Trusted Platform Control Module and Peripheral
  • 5.3 Other
  • 6 Functional composition of trusted platform control module
  • 6.1 Functional composition framework
  • 6.2 Hardware layer
  • 6.3 Basic software layer
  • 6.4 Functional component layer
  • 6.5 Interconnection interface
  • 7 Interface of Trusted Platform Control Module
  • 7.1 Computing component interface
  • 7.2 Trusted Software Base Interface
  • 7.3 Management interface
  • 7.4 Trusted cryptographic module interface
  • 8 Security
  • 8.1 Identification
  • 8.2 Resource Access Control
  • 8.3 Audit
  • 8.4 Storage space safety requirements
  • 8.5 Data protection
  • 8.6 Physical protection
  • 9 Operation and maintenance
  • 9.1 Self-check
  • 9.2 Status Maintenance
  • 10 Confirmation method
  • 10.1 Trusted platform control module of trusted computing node
  • 10.2 Functional composition of trusted platform control module
  • 10.3 Interface of Trusted Platform Control Module
  • 10.4 Safety protection
  • 10.5 Operation and maintenance

Foreword

This document is in accordance with the provisions of GB/T 1.1-2020 "Guidelines for Standardization Work Part 1: Structure and Drafting Rules of Standardization Documents" Drafting.

1 Scope

This document describes the position and role of the trusted platform control module in the trusted computing node, and specifies the functions of the trusted platform control module.

Capability, functional interface, safety protection, operation and maintenance requirements and verification methods.

This document is applicable to the design, production, operation, maintenance and evaluation of the trusted platform control module.

2 Normative references

The content of the following documents constitutes an indispensable clause of this document through normative references in the text. Among them, dated quotations Only the version corresponding to the date is applicable to this document; for undated reference documents, the latest version (including all amendments) is applicable to this document.

GB/T 29829 Information Security Technology Trusted Computing Cryptographic Support Platform Function and Interface Specification

GB/T 37935 Information Security Technology Trusted Computing Specification Trusted Software Base

GM/T 0008 Security Chip Password Detection Guidelines

3 Terms and definitions

The following terms and definitions apply to this document.

3.1 Trusted cryptography module

A module that has functions such as cryptographic operations required by trusted computing and can provide protected storage space.

3.2 Trusted computing node

A computing node that is composed of trusted protection components and computing components, and has the function of computing and protecting parallel operation.

3.3 Trusted Platform Control Module

The protection component components integrated in the trusted computing node are composed of hardware, software and firmware, and the hardware, software and firmware of the computing component Parallel connection is a basic core module used to establish and guarantee the source of trust. It provides active measurement, active control, and active control for trusted computing nodes.

Functions such as trusted verification, encryption protection, trusted report, and password invocation.

3.4 Valid state

The trusted platform control module is in a working state that can receive and execute all instructions.

3.5 Disable state

The trusted platform control module is in a special working state where it can only execute query and enable commands.

3.6 Active self-checking

The trusted platform controls the detection operation of the module's internal specified content after the module is powered on.

......
This preview omits tables, figures, formulas and parts of the technical clauses. The complete document — 15 pages — is available in the English PDF.

Referenced standards

Similar standards

How to Download GB/T 40650-2021

  1. 1

    Add to cart

    Click "Download PDF" on this page and choose "Buy this standard". You can add more standards before checkout.

  2. 2

    Checkout

    Enter your email and billing details. Payment is processed securely by Stripe (cards or bank transfer). Prefer bank details? Request a quotation (min. order $300).

  3. 3

    Instant delivery (0–9 sec)

    Delivery is automatic: within seconds of payment you'll receive an email with a secure download link. The link stays valid for 72 hours.

  4. 4

    Invoice included

    A tax invoice is attached to the confirmation email. Need a custom invoice? Contact us.

Related Standards

English PDF
15 pages
Instant delivery (0–9 sec)
Invoice included
View Cart

Secure payment via Stripe

Payments accepted

VisaMastercardAmerican ExpressApple PayGoogle PayStripe

GB/T 40650-2021

$180.00